Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.cer
File:                     rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.cer (raw, json)
Hash identifier:          KrGeAcMwwTk9NPz/H8nQxMvdFEmLw7BzbtV+2p0vnIM=
Subject key identifier:   AD:9E:CE:A3:97:FC:41:7E:97:BD:DE:AC:61:83:B6:5B:60:52:65:30
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 12 Nov 2021 20:15:50 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.93.180.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31838 (0x7c5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 12 20:15:50 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AD9ECEA397FC417E97BDDEAC6183B65B60526530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:4e:3e:2f:0c:97:43:b6:53:20:f1:c5:6d:
                    24:93:d8:33:ae:21:0a:d8:4d:b6:ce:53:eb:7e:43:
                    4d:0d:6e:75:8a:df:00:88:ab:f5:94:2a:bc:eb:a9:
                    68:99:57:ef:33:df:45:c4:5c:e7:a2:a5:1f:f7:d5:
                    5e:8d:1f:c2:57:69:1d:08:45:41:4b:54:89:7a:fb:
                    0e:00:c9:a1:ee:b2:d1:02:25:60:db:80:9c:ed:c6:
                    14:f3:16:28:03:3c:da:a1:7e:fb:7c:76:43:f8:88:
                    61:74:38:0c:d9:62:4d:43:c7:d2:db:6d:19:c5:9c:
                    28:ce:f8:47:13:cb:70:38:9b:fc:9c:79:7c:66:2d:
                    90:3d:a3:3a:46:2b:fc:bc:04:1f:81:45:b2:97:39:
                    33:80:06:6f:2d:1c:e3:8b:c6:46:45:16:78:df:7a:
                    d7:4e:8b:b7:6a:a1:53:9b:77:c4:43:09:77:59:9e:
                    c1:b3:b9:a0:d7:bf:38:b8:a2:58:f0:43:7e:84:77:
                    2d:b4:b7:4b:c5:96:59:16:51:10:f4:75:fc:b8:79:
                    57:5b:80:78:9b:67:c6:9c:fd:c2:ce:80:cd:5f:8a:
                    57:e8:43:71:c4:0d:67:0f:89:a4:ab:2a:d4:f4:6b:
                    38:2a:58:6d:ac:a1:ab:f6:c2:0f:8a:54:2c:12:0c:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:CE:A3:97:FC:41:7E:97:BD:DE:AC:61:83:B6:5B:60:52:65:30
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2453/rZ7Oo5f8QX6Xvd6sYYO2W2BSZTA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:05:42:23:f8:8e:14:64:23:5f:67:73:21:0a:30:f0:63:
         b4:d7:a7:0a:87:31:12:8c:19:39:a2:c7:30:50:e4:6d:19:8f:
         ed:9c:67:21:19:ce:e2:73:c4:39:f4:12:4b:5e:ad:c1:d8:23:
         30:3e:91:91:02:61:19:67:20:a6:fb:9b:6c:73:23:77:56:19:
         f8:df:f8:6d:e0:4c:55:24:2f:98:47:db:6d:2f:cb:fb:c5:47:
         50:cc:3b:6a:52:c4:fb:29:8f:83:9d:6c:54:e7:ca:4d:a9:4e:
         53:22:95:a2:b1:23:9b:21:9c:ab:02:97:ef:4d:2e:32:6a:a1:
         1a:2b:94:39:02:74:75:be:20:b9:79:7a:88:0a:b1:75:30:fe:
         b7:e0:97:fa:8e:f3:be:e0:21:aa:06:24:3c:0a:9c:12:02:28:
         33:fa:15:e4:25:ba:ad:30:b6:47:8a:44:ba:83:20:ef:1a:c7:
         7d:1d:b8:58:81:4c:94:11:fb:0d:75:1c:16:cf:06:6b:ba:22:
         36:3f:3a:40:1e:01:e8:cc:c7:b2:b1:74:64:34:31:1a:c6:87:
         71:d6:7c:81:a8:39:f6:6b:79:1f:8b:9a:cb:49:f3:dc:71:20:
         0c:36:89:5c:8f:dd:30:1b:0c:7e:e0:33:0f:9a:54:67:32:41:
         5f:66:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----